Alex Cortinovis

Expert in Digital Forensics and Data Recovery, Independent Developer

About

Alex Cortinovis

I have been working in digital forensics and data recovery since 2016 at the Forensic Computer Engineering Studio of Michele Vitiello in Brescia, Italy. Every year around 300 devices — smartphones, computers, storage media and cloud accounts — cross my desk to be acquired and analysed, along with some thirty damaged media to recover data from.

Working on both fronts means I can also follow cases where the evidence sits on compromised media: from chip-off on NAND memory in a clean room to the technical report.

What I do

  • Forensic analysis — Acquisition and analysis of mobile devices, computers and cloud sources. Mostly civil cases (Business Email Compromise, log analysis, unfair competition, employment disputes) and criminal cases with a technical component. I work as an assistant to the technical expert, and since 2025 I co-sign the reports.
  • Call records and cell sites — I am the firm's lead for call detail record and cell coverage analysis, using SecurCube PhoneLog and Cell Map Designer, the mapping software I built for the job.
  • Data recovery — Hard disks, flash, SD and microSD with logical, physical or electronic damage; NAND chip-off, FTL reconstruction, PC-3000 Express and PC-3000 Flash.
  • Audio forensics — Restoration and enhancement of recordings, transcription, speaker comparison and identification.
  • Cyber security — Penetration testing, vulnerability assessment, incident response, analysis of malware, spyware and MITM attacks.

Teaching

I have been teaching digital forensics since 2017: courses for private clients and law enforcement at the firm and, since 2026, the CIFI (IISFA) certification prep course for Slash School — 40 hours over 20 lessons, which I designed from scratch.

Recent talks

  • 2026Agenfor International, EU project Phygital-OC, Module 6 “Digital Forensics and Location Intelligence”EN
  • 2026Venice Local Police Command, “AI nella Polizia Locale: casi d'uso, strumenti e impatti operativi” (AI in local policing: use cases, tools and operational impact)
  • 2025Agenfor International, “Source Project – Practical Realities of Digital Forensics”EN
  • 2025Agenfor International, “Transfer of Digital Evidence and Forensic Analysis”EN

Open source tools

I build tools to fill the gaps in the commercial software I use every day: 19 public repositories on GitHub, including Forensic IMAP Downloader, Cell Map Designer and TWRP to UFED.

Browse the software →

Background

  1. 2026
    • CIFI certification (IISFA)
    • Instructor for Slash School
    • Launch of Daily Crack
  2. 2025
    • Co-signer of technical reports
    • First international teaching with Agenfor
  3. 2018
    • PC-3000 Flash Data Recovery Expert Training, ACELab (Prague)
  4. 2017
    • Degree in Security of Information Systems and Networks, University of Milan
    • Digital Forensics & Ethical Hacking course, Brescia Order of Engineers
  5. 2016
    • Joined the Forensic Computer Engineering Studio and Recupero Dati Brescia

Certifications and memberships

  • CIFI — Certified Information Forensics Investigator (IISFA), July 2026
  • IISFA member — Italian Chapter
  • PC-3000 Flash Data Recovery Expert — ACELab

Tools I use

  • Cellebrite UFED
  • Magnet Axiom
  • Graykey
  • X-Ways
  • Oxygen Forensic Detective
  • PC-3000
  • SecurCube PhoneLog
  • iZotope RX

Outside work

Mountains and hiking, electronics, and for years beta tester and community moderator for Disa, an Android app with over a million downloads.

Contacts